Threat Actors Leverage Google Ads to Weaponize PDF Editor with TamperedChef

Cybersecuritynews •Tushar Subhra Dutta • January 20, 2026

A malvertising campaign identified in September 2025 has brought a significant threat to Windows users worldwide. Attackers created fake PDF editing applications and them through Google Ads to distribute a dangerous information-stealing malware called TamperedChef. The malware targets users searching for appliance manuals and PDF editing tools online, exploiting common behaviors to deliver […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malvertising Campaign Distributes TamperedChef via Google Ads A malvertising campaign identified in September 2025 has targeted Windows users by promoting fake PDF editing applications through Google Ads. The malware, known as TamperedChef, has compromised over 100 organizations across 19 countries, stealing browser credentials and establishing backdoor access on infected systems. 3 sources 36

Extracted Entities

Threat Actors Leverage Google Ads to Weaponize PDF Editor with TamperedChef

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)